Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E8A3D6CC0CA11EFAF009C7D762E951A.roa
File: 5E8A3D6CC0CA11EFAF009C7D762E951A.roa (raw, json)
Hash identifier: fhLWU8KPp/isGOSIuohfzFN71EUoa3vVylpEMqfgS8Y=
Subject key identifier: F4:0D:3F:86:62:C5:FD:6D:C9:00:07:70:34:68:A8:57:38:12:8D:21
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011DF0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E8A3D6CC0CA11EFAF009C7D762E951A.roa
Signing time: Mon 23 Dec 2024 01:08:07 +0000
ROA not before: Mon 23 Dec 2024 01:08:04 +0000
ROA not after: Wed 10 Dec 2025 01:08:04 +0000
asID: 984
IP address blocks: 154.82.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73200 (0x11df0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 01:08:04 2024 GMT
Not After : Dec 10 01:08:04 2025 GMT
Subject: CN=6768b7f7-be42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:02:13:05:33:82:fb:60:68:bf:49:d7:84:cf:
b7:49:c0:49:41:da:04:64:bb:99:fe:5e:ef:6c:05:
96:f1:33:53:bd:cc:3a:b0:94:13:4d:04:26:48:01:
e3:7a:4d:57:d3:a1:a8:30:f2:1b:00:88:60:48:74:
17:2f:aa:4c:d4:4a:93:8a:99:b3:9f:2f:6c:22:3e:
7e:9c:c0:a6:39:f8:63:a5:4a:1b:2b:17:32:b5:f4:
ba:09:d4:b7:db:b2:b7:d4:af:04:d7:65:83:1f:95:
9d:d1:a8:6f:9b:4c:46:22:14:45:3c:83:95:2a:f4:
21:f3:e0:71:75:9a:80:74:cf:42:62:c5:21:2a:69:
52:42:ed:89:0a:06:f5:90:3d:1d:90:85:d5:31:8d:
04:72:08:9c:7a:79:c4:98:37:49:55:71:24:d3:f1:
34:d8:52:ee:85:53:6a:33:81:6b:34:7b:8f:f6:14:
1b:93:3b:41:01:92:e5:43:06:1a:fa:0b:f5:fd:5b:
78:d5:4f:77:80:a5:0d:e0:e0:ab:99:ae:21:95:54:
36:b5:a9:6c:a8:b3:da:b5:52:2e:9e:30:6d:80:0f:
09:13:35:a1:4f:be:57:08:d0:7a:c2:5a:3e:9f:01:
e8:25:f3:b7:14:f8:0e:b3:f6:9e:9a:6d:ac:08:65:
47:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:0D:3F:86:62:C5:FD:6D:C9:00:07:70:34:68:A8:57:38:12:8D:21
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E8A3D6CC0CA11EFAF009C7D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.235.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:d0:5d:35:a7:e9:73:21:5a:92:2d:53:f8:ff:a8:e2:76:12:
b5:09:f1:2f:6c:54:d9:c6:c8:ef:1b:82:2b:e6:8d:ef:10:96:
c5:4c:9b:f9:ab:69:e8:03:c3:d6:5b:62:2c:77:67:9a:7e:51:
49:1d:04:ea:8d:9d:ba:a3:b1:5d:9d:08:30:f2:3f:82:86:76:
ea:ed:35:9e:bd:e7:8f:6e:77:ae:37:96:11:c9:6e:14:7f:87:
29:24:bc:7b:52:b9:a5:d8:b3:f5:86:5a:63:22:88:65:c6:4a:
12:82:9f:58:39:a8:32:d7:a9:af:db:8d:66:3b:c9:82:62:f7:
cc:b5:28:0f:c9:91:85:b2:47:8f:38:cd:d0:46:4c:20:02:a4:
b6:7c:49:de:0d:43:c9:1f:2b:0f:f4:98:20:38:57:ef:0e:78:
7d:3c:2e:11:a9:8f:86:a2:38:cf:ba:91:36:ae:93:31:1e:ee:
27:49:51:e0:5c:9e:45:28:0c:77:a5:cc:6d:f9:99:9a:ed:0b:
cc:fe:5c:9b:e5:f3:0a:2c:d5:0f:84:76:cf:ba:7a:f4:bf:53:
9f:4e:f5:e8:f3:06:89:e2:25:16:d3:2b:2a:d7:e9:4e:fa:20:
99:8d:a9:9a:4a:47:02:a5:d0:0a:cc:4b:a1:d6:dd:1d:4a:ce:
91:1b:12:11
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAR3wMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjIzMDEwODA0WhcNMjUxMjEwMDEwODA0WjAYMRYw
FAYDVQQDEw02NzY4YjdmNy1iZTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvAITBTOC+2Bov0nXhM+3ScBJQdoEZLuZ/l7vbAWW8TNTvcw6sJQTTQQm
SAHjek1X06GoMPIbAIhgSHQXL6pM1EqTipmzny9sIj5+nMCmOfhjpUobKxcytfS6
CdS327K31K8E12WDH5Wd0ahvm0xGIhRFPIOVKvQh8+BxdZqAdM9CYsUhKmlSQu2J
Cgb1kD0dkIXVMY0EcgicennEmDdJVXEk0/E02FLuhVNqM4FrNHuP9hQbkztBAZLl
QwYa+gv1/Vt41U93gKUN4OCrma4hlVQ2talsqLPatVIunjBtgA8JEzWhT75XCNB6
wlo+nwHoJfO3FPgOs/aemm2sCGVHKwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFPQN
P4Zixf1tyQAHcDRoqFc4Eo0hMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81RThBM0Q2Q0MwQ0ExMUVGQUYwMDlDN0Q3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlLrMA0GCSqGSIb3DQEB
CwUAA4IBAQDJ0F01p+lzIVqSLVP4/6jidhK1CfEvbFTZxsjvG4Ir5o3vEJbFTJv5
q2noA8PWW2Isd2eaflFJHQTqjZ26o7FdnQgw8j+Chnbq7TWeveePbneuN5YRyW4U
f4cpJLx7Urml2LP1hlpjIohlxkoSgp9YOagy16mv241mO8mCYvfMtSgPyZGFskeP
OM3QRkwgAqS2fEneDUPJHysP9JggOFfvDnh9PC4RqY+GojjPupE2rpMxHu4nSVHg
XJ5FKAx3pcxt+Zma7QvM/lyb5fMKLNUPhHbPunr0v1OfTvXo8waJ4iUW0ysq1+lO
+iCZjamaSkcCpdAKzEuh1t0dSs6RGxIR
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:18:54 2025 by rpki-client